BUG BOUNTY: BYPASSING WAF TO GET LFI (REAL TARGET) | 10K SPECIAL | 2023

[@mandikgoyal7740]

Very Informative Videos Keep up the good work

[@Th3-Noob-Audit0rs]

❤ hope your video's bypass KZbin guidelines also

[@BanglaEdition24]

😂

[@FAHADKHATRI12]

This is valuable information!

[@морс-ф3д]

Congratulation on you 10000 subs!!!) You deserve MORE!!!!

[@Deepakkumar-pm2kt]

Loved the video man. Learnt a lot from how your explanations.

[@Fractal_reComm]

Dude, I'm a big fan and I admire and inspire me, your work, I would like you to help me find simpler sites like this. Generally, my targets are very well protected, but it's possible to overcome them. them and this takes much more time than in simpler systems, I have little experience but I have already found some cool vulnerabilities, I still can't afford better education in cybersecurity, I would be very happy and I'm sure that the entire community that is also starting out would be very happy and would help a lot, thank you for everything, I hope you read it

[@HunterX461]

Congratulations bro for 10k fam ❤🎉Next milestone is of 50k subs😊

[@abduls4479]

Awesome video.. thanks man

[@islamkafafy6984]

Wow Dude you are amazing keep uploading top tier videos more

[@zahiruddinahmad55]

Please make a video 403/404 bypass

[@ReligionAndMaterialismDebunked]

Yeee. More of these would be awesome. Hehe. I know we can add hostname:3000, and some stuff like that.

[@imran_hossain123]

Thanks from Bangladesh

[@gauravkesharwani5557]

Great explanation bro. Many people teach if we want to check for such vulnerabilities we need to use payloads like ../../../../etc/passwd. However you shared another perspective - why to just try /etc/passwd, if we can check with other files within web root leading to source code reveal. Thanks for sharing this content

[@MRIDULSG]

I have a question regarding this. What I understand is in LFI, you can actually execute the files on the server. In this case, the index.php file shall show the output of the executed version of the index.php file instead of showing the source code. In directory traversal, we can see the content of the file. Please Correct me if I'm wrong.

[@BePracticalTech]

Actually in local file inclusion, you will be able to see the contents of files present on the server. However, there are certain scenarios where you'll be able to execute the files(like you mentioned) but it depends from target to target. The vulnerable endpoint here was actually serving the content of the pdf that's why we were able to get the content of source code. Hope you understood

[@hamzaannane885]

From 10k to 100k 🎉🎉🎉 one day

[@hackingstudy-g5h]

you amazing man, thanks for the effort, you really work hard to give us the best content, and we appreciate it.

[@BePracticalTech]

Thank you

[@akashpatel-bs8ve]

Nice information, jump to 4:00 to main content 👍

[@ReligionAndMaterialismDebunked]

Early crew. :3

[@medamine6745]

you haven't bypass the WAF, did you get /etc/passwd ? nope !

[@mnoobb69]

Where are you from bro?

[@BePracticalTech]

India

[@tanvirmridha]

😮

[@TechAmbition]

Bro targeting real host *Only for educational purposes 😅

[@hamzaannane885]

Keep going 🎉🎉🎉 u are the best

[@Be_Buddhaa]

How many programming languages do you know?😢

[@BePracticalTech]

I know few programming languages

[@Be_Buddhaa]

@@BePracticalTech name please ?🥵🔥

[@oswardgaming3223]

Bro i am new in bug hunting so suggest me the right path for bug hunting

[@BePracticalTech]

Join our telegram community: telegram.me/bepracticaltech